An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.
Exploitability
AV:LAC:HAT:NPR:HUI:NVulnerable System
VC:NVI:LVA:NSubsequent System
SC:NSI:NSA:N1.8/CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:NOther